Maland

**Name of the Vulnerable Software and Affected Versions** automad versions up to 1.10.9 **Description** A vulnerability was found in automad, allowing for cross-site scripting due to the manipulation of the `sitename` argument. This issue affects some unknown functionality of the file packagesstandardtemplatespost.php of the component Setting Handler. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vulnerability is related to the `SharedController` class that handles form data and saving shared information, which does not properly sanitize user input on the client side when rendering the data. **Recommendations** For automad versions up to 1.10.9, consider disabling the `sitename` argument or restricting its use until a patch is available. As a temporary workaround, ensure proper sanitization of user input on the client side when rendering data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** automad versions up to 1.10.9 **Description** A vulnerability was found in the function `upload` of the file `FileCollectionController.php` of the component `Content Type Handler`. This leads to unrestricted upload. The attack may be launched remotely and an exploit has been disclosed publicly. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For versions up to 1.10.9, as a temporary workaround, consider disabling the `upload` function of the `FileCollectionController.php` file until a patch is available. Restrict access to the `Content Type Handler` component to minimize the risk of exploitation. Avoid using the `FileCollectionController.php` file in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** automad versions up to 1.10.9 **Description** A critical issue affects the `import` function in the `FileController.php` file, where the manipulation of the `importUrl` argument leads to server-side request forgery. This can be initiated remotely and may allow attackers to perform a port scan against the local environment or abuse some services. **Recommendations** For versions up to 1.10.9, consider disabling the `import` function in the `FileController.php` file until a patch is available, or restrict the use of the `importUrl` argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** automad versions up to 1.10.9 **Description** A vulnerability was found in the User Creation Handler component, affecting the processing of the file "/dashboard?controller=UserCollection::createUser". This issue leads to cross-site request forgery, which can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. The vulnerability can be exploited to force an admin into creating or deleting users, as automad does not implement anti-CSRF tokens by default. **Recommendations** For automad versions up to 1.10.9, consider implementing anti-CSRF tokens to prevent cross-site request forgery attacks. As a temporary workaround, restrict access to the "/dashboard?controller=UserCollection::createUser" endpoint to minimize the risk of exploitation. Avoid using the `UserCollection::createUser` controller until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.